Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/QBMgJJ-gzhOWtEfRUnPV8Vd0czk.roa
File: QBMgJJ-gzhOWtEfRUnPV8Vd0czk.roa (raw, json)
Hash identifier: fnpPeAhE1qRpNeEoN4bHoQb44akjgt6sxk17NHrkbog=
Subject key identifier: 40:13:20:24:9F:A0:CE:13:96:B4:47:D1:52:73:D5:F1:57:74:73:39
Certificate issuer: /CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Certificate serial: 01856CF85EA1C5725B303FB522887525B9C6
Authority key identifier: 18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/QBMgJJ-gzhOWtEfRUnPV8Vd0czk.roa
Signing time: Sun 01 Jan 2023 10:54:54 +0000
ROA not before: Sun 01 Jan 2023 10:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35393
IP address blocks: 91.198.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:f8:5e:a1:c5:72:5b:30:3f:b5:22:88:75:25:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18abae0e1f216a321973ccc9c6537ec6197dab18
Validity
Not Before: Jan 1 10:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=401320249fa0ce1396b447d15273d5f157747339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6a:1c:e4:9f:e4:1e:93:64:d1:33:5c:57:45:
89:68:ed:d5:63:0b:8a:7b:a1:d8:d8:d5:64:c7:bb:
26:d4:cf:2e:b7:bf:1e:17:67:d6:f0:3e:49:14:40:
ee:e1:d9:f7:99:cf:63:78:80:da:61:e8:a3:d1:7c:
60:a3:94:33:09:1f:f6:01:20:77:95:c1:f4:14:62:
15:ca:77:5f:ce:4d:8b:a3:25:00:f0:0d:22:e5:7b:
16:3e:1a:03:71:4c:f7:3d:cd:a3:ef:1d:c5:d8:e9:
30:d2:94:48:82:85:eb:77:b1:2e:2e:97:25:97:44:
af:15:9f:68:1b:80:a2:23:c0:87:01:26:fb:c4:a6:
4b:bd:ea:3c:e0:f3:95:20:0e:38:c3:cf:01:b4:72:
dd:57:09:a1:d2:1a:84:a9:78:2a:de:4d:a7:1b:79:
fb:c7:e3:99:60:09:fa:aa:73:0f:3b:e6:cc:66:29:
4d:a3:42:da:f6:45:72:ac:ec:20:42:10:bb:45:ed:
94:62:46:4d:c5:a3:66:34:eb:9f:4e:10:17:00:ea:
5c:06:e8:99:54:45:1b:30:f4:b5:fc:b2:ed:4f:d3:
b6:83:91:41:18:5e:37:cd:7c:8d:8d:b2:a1:cb:8b:
b5:6f:3c:d4:3f:df:ec:ed:d7:f6:98:51:e6:d1:e5:
12:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:13:20:24:9F:A0:CE:13:96:B4:47:D1:52:73:D5:F1:57:74:73:39
X509v3 Authority Key Identifier:
keyid:18:AB:AE:0E:1F:21:6A:32:19:73:CC:C9:C6:53:7E:C6:19:7D:AB:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKuuDh8hajIZc8zJxlN-xhl9qxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/QBMgJJ-gzhOWtEfRUnPV8Vd0czk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/721745-cfe5-4161-b405-069996c630f0/1/GKuuDh8hajIZc8zJxlN-xhl9qxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.105.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:af:03:4c:9d:9b:e6:ae:30:f9:c6:db:1a:29:db:89:6c:85:
c2:4d:9a:fe:24:6d:46:f9:e5:52:bb:56:62:b4:fb:cb:bf:96:
ad:44:24:54:f6:2e:ff:08:99:0d:12:40:57:58:a5:57:83:cb:
36:22:15:b4:46:28:20:ed:bb:f2:95:0c:ea:20:8d:63:79:44:
83:8a:19:40:60:9f:2c:d2:71:30:bd:00:af:52:98:31:91:fb:
45:51:85:98:36:0e:79:41:2b:22:25:2c:71:c0:32:0b:d6:06:
1d:d3:c8:09:66:4c:cc:f6:c6:62:74:53:44:76:ca:1b:f2:4e:
c5:3c:68:6b:b3:da:5f:af:97:21:50:d4:d4:c0:2b:70:76:8c:
40:0a:2c:c2:32:e9:5f:a0:ae:3a:ab:9c:ff:e5:02:bf:c2:8a:
13:9e:19:38:2f:e0:60:b1:36:13:92:3d:6c:57:8f:5e:36:ba:
98:0d:a8:6c:88:83:77:eb:7f:8a:6f:d9:1f:2c:df:b5:7c:f3:
a3:84:30:81:da:03:8e:22:c6:3f:9d:63:a1:71:33:44:76:74:
92:68:2a:53:37:63:8b:25:15:70:0e:1b:80:77:36:47:25:a1:
35:ed:e8:53:14:c5:b7:3d:35:ad:95:e3:03:8e:71:87:b3:27:
2e:e5:c3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:47 2024 by rpki-client on console-ams.rpki-client.org